Splunk Search

Community Activity

How do you display days in chronological order not alphabetically? Hi, I am using the below search to display the average transactions by day over a couple weeks. I need the days to s... by cwhurd1 New Member in Splunk Search 12-18-2018 0 5	0	5
\|stats count(sum) as a grouped TIMECHART Hello ...query \| bucket span=1month _time \| eval date=strftime(_time, "%Y/%m/%d ") \|stats count sum(2017_totals) ... by TCK101 New Member in Splunk Search 12-18-2018 0 1	0	1
How do you run a script on a column search result? Hi, I want to run a script on all values in a column like that: index="myindex" mysearch_filters \| table id \| scrip... by rolivet New Member in Splunk Search 12-18-2018 0 1	0	1
i would like to get the total bandwidth used by a particular subnet in my network i would like to get the total bandwidth used by a particular subnet in my network, please help, i am new in splunk, by ikaneng New Member in Splunk Search 12-18-2018 0 3	0	3
How to upgrade add-on infoblox v11.0.2 to v1.1.0 in a single clustered environment including SHC, HFs and single ES How to upgrade add-on infoblox v1.0.2 to v1.1.0 in a single clustered environment including SHC, HFs and single ES (... by bwidi New Member in Splunk Search 12-18-2018 0 0	0	0
Are there field extractions available for IPlanet web access logs? Here's the fields followed by a description: Hostname or IP address of client arrow.a.com. (In this case, the hos... by ndoshi Splunk Employee in Splunk Search 12-18-2018 0 4	0	4
Can you visualize text in Splunk? I am trying to see if I can visualize text in splunk. For example, I have results showing a build going through multi... by askarkz Explorer in Splunk Search 12-18-2018 0 7	0	7
How do I get a report of all alerts configured in Splunk? How do I get a report of all alerts configured in Splunk. When i click the alert tabs it shows the alerts but unable... by logloganathan Motivator in Splunk Search 12-18-2018 0 1	0	1
Can you help me with some predictive analytics for the current month? I want to forecast future values of a field. _time TOTAL 01-07-2018 200 01-08-2018 220 01-09-2018 ... by joydeep741 Path Finder in Splunk Search 12-18-2018 0 1	0	1
Can you help me with my tstats sub query? Hello, I have a tstats query that works really well. However, I am trying to add a sub search to it to attempt to id... by griggsy New Member in Splunk Search 12-18-2018 0 4	0	4
How to use regex on a field's value in a search? index=system* sourcetype=inventory order=829 I am trying to extract the 3 digit field number in this search with r... by splunkuser21 Engager in Splunk Search 12-18-2018 0 4	0	4
How do you apply a formula from another field to eval its value? Hi, I basically want to eval a result-field based on the formula contained in another field. The formula in the othe... by flopit Path Finder in Splunk Search 12-18-2018 0 4	0	4
Splunk DB Connect: Time conversion error while working with SQL Audit log data I have a SQL query using at Splunk DB Connect to pull the SQL audit log into Splunk as below: SELECT event_time, act... by jasonsun Explorer in Splunk Search 12-18-2018 0 1	0	1
How to dynamically set the y-axis scale of a chart with the max value needed + X%? Hi all! I have the following search which displays a stacked bar chart: <index, filters and sourcetype> \| stats cou... by andreafebbo Communicator in Splunk Search 12-17-2018 1 7	1	7
Why is the rename command not working post using fillnull? Can you please help check why below command is not working. index="app_batch_reports" "] ERROR [" NOT "MessageClient... by AnmolKohli Explorer in Splunk Search 12-17-2018 0 1	0	1
Error :"Currently displaying the recent 1000 events in the select range.Select a narrow range or zoom in to see more events." Hello, I have the following error message. "Currently displaying the recent 1000 events in the select range.Select ... by Shuhei052492 Path Finder in Splunk Search 12-17-2018 0 0	0	0
REGEX field at index time - transforms.conf hi, I'm trying to prepare output at the index time for IIS logs and cs_username which for now contains prefix that I... by aszczudlo Engager in Splunk Search 12-17-2018 0 1	0	1
How to monitor USB plug and remove on server 2008 R2? OS: CentOS 7 Component: Search Head, Indexer Product: Splunk Enterprise Version: 7.2.1 OS: Windows server200... by aojie654 Path Finder in Splunk Search 12-17-2018 0 5	0	5
In a search, how would I get the difference between the primary region and all other regions? I have this query that is supposed to get the difference between the primary region and all other regions, but for so... by kiamco Path Finder in Splunk Search 12-17-2018 0 3	0	3
How do I make a custom alert message with variables? Hello, I have a search with several OR statements in it. Example, Microservice=this OR Microservice=that. When the s... by rbrisseyii Explorer in Splunk Search 12-17-2018 0 5	0	5
How do I make a Splunk query that generates stats grouped by account name? Here is my current query: index=wineventlog sourcetype=WinEventLog:Security EventCode=4625 \| rex ".*Account\sName:\s... by bm1391 New Member in Splunk Search 12-17-2018 0 3	0	3
Can you help me create a regex expression that would extract a field? Hi All, I'm trying to extract a field. However, the field I want to extract isn't at the same location each time.... by itionet New Member in Splunk Search 12-17-2018 0 8	0	8
Can you help me to create a query with a timechart? Hi all, with the query below I have extracted the sum of overtime per day. index="effort_tracker" \| stats count by... by kingwaras Engager in Splunk Search 12-17-2018 0 1	0	1
How can I split IIS logs from Amazon Kinesis stream on "- -" ? Hello - Is there a way to split the line below : with '--". This is from the IIS logs of Amazom Kinesis. 200 is h... by jmajumdar Explorer in Splunk Search 12-17-2018 0 2	0	2
How can we make multiple MAC address formats be readable in one search, regardless of format? I'm still pretty new so the answer is probably easy, but am stuck trying to making this search form work. The goal i... by rpquinlan Path Finder in Splunk Search 12-17-2018 0 9	0	9